Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/ebd05e-f607-4bfb-a42b-127008924eed/1/AyhzUYaXwj6cPjemRrrRISNa10Q.mft
File:                     AyhzUYaXwj6cPjemRrrRISNa10Q.mft (raw, json)
Hash identifier:          l9MZehNwQrpu6vvI0EgvwdfJmDoPusCq1zPIEQZtW04=
Subject key identifier:   E5:81:9B:03:DE:FB:27:E1:FE:25:F6:34:4B:34:7D:14:C9:3C:82:1F
Authority key identifier: 03:28:73:51:86:97:C2:3E:9C:3E:37:A6:46:BA:D1:21:23:5A:D7:44
Certificate issuer:       /CN=032873518697c23e9c3e37a646bad121235ad744
Certificate serial:       019E311754DCE0A04072B3DA31950D735CFD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/AyhzUYaXwj6cPjemRrrRISNa10Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6e/ebd05e-f607-4bfb-a42b-127008924eed/1/AyhzUYaXwj6cPjemRrrRISNa10Q.mft
Manifest number:          1913
Signing time:             Sat 16 May 2026 14:01:13 +0000
Manifest this update:     Sat 16 May 2026 14:01:13 +0000
Manifest next update:     Sun 17 May 2026 14:01:13 +0000
Files and hashes:         1: AyhzUYaXwj6cPjemRrrRISNa10Q.crl (hash: JatvCkOOXBBtkDKlHiq8K2buCyaTKrXhAHCsgypyQq8=)
                          2: NUMsW2fdf3SjrYGEQTRkZNhTS7A.roa (hash: NIqv3PrQsgpG1/zoYtC/m+nGNGEajaJy1aijMy9aHTo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6e/ebd05e-f607-4bfb-a42b-127008924eed/1/AyhzUYaXwj6cPjemRrrRISNa10Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6e/ebd05e-f607-4bfb-a42b-127008924eed/1/AyhzUYaXwj6cPjemRrrRISNa10Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/AyhzUYaXwj6cPjemRrrRISNa10Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 17 May 2026 12:40:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:31:17:54:dc:e0:a0:40:72:b3:da:31:95:0d:73:5c:fd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=032873518697c23e9c3e37a646bad121235ad744
        Validity
            Not Before: May 16 14:01:13 2026 GMT
            Not After : May 17 14:01:13 2026 GMT
        Subject: CN=e5819b03defb27e1fe25f6344b347d14c93c821f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:fc:44:fb:76:15:d0:df:7a:c4:7b:c5:03:1b:
                    7e:88:a8:47:04:40:f7:7e:99:2f:54:55:08:a2:97:
                    33:ec:57:0a:10:24:0d:de:38:8b:6a:30:5b:5e:b0:
                    4e:08:bc:84:34:ea:54:d3:fc:02:a7:57:64:4b:7e:
                    12:56:3b:da:96:ff:2f:d6:31:2e:a5:bb:bb:b5:b3:
                    05:a9:1b:96:ac:c5:9e:5c:bb:d0:b5:1d:86:fb:cd:
                    fa:03:ee:43:fe:c3:cf:8c:80:f7:2b:18:75:b1:40:
                    50:4f:79:4a:02:e1:a4:a9:ad:18:bc:31:e1:9b:57:
                    98:3b:5b:2b:4d:26:8f:cd:58:8c:3d:89:ee:e4:62:
                    75:86:76:48:41:07:40:a3:de:a5:d6:b1:e4:1d:f5:
                    08:6c:da:76:2a:b1:f6:0c:46:67:34:e7:cb:f3:4b:
                    93:b7:e5:d8:e9:24:8c:1c:58:24:4a:81:3f:85:ed:
                    6a:05:0a:67:83:e2:f5:15:9b:3a:f5:8d:f1:75:af:
                    af:81:f1:14:d5:a5:71:ee:6b:26:1a:ff:d2:b1:ab:
                    e4:2c:69:1a:fd:60:8f:7b:d8:b3:88:f8:98:8e:67:
                    62:1d:a0:10:db:87:9e:10:f5:8e:9c:d6:5a:17:a7:
                    af:e3:87:76:d9:15:71:2e:46:db:60:b4:21:34:06:
                    c6:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:81:9B:03:DE:FB:27:E1:FE:25:F6:34:4B:34:7D:14:C9:3C:82:1F
            X509v3 Authority Key Identifier:
                keyid:03:28:73:51:86:97:C2:3E:9C:3E:37:A6:46:BA:D1:21:23:5A:D7:44

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AyhzUYaXwj6cPjemRrrRISNa10Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/ebd05e-f607-4bfb-a42b-127008924eed/1/AyhzUYaXwj6cPjemRrrRISNa10Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/ebd05e-f607-4bfb-a42b-127008924eed/1/AyhzUYaXwj6cPjemRrrRISNa10Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         61:3f:6a:82:53:bb:9d:e4:9a:59:53:de:75:03:d8:b8:88:e7:
         f5:13:8f:4b:79:2a:86:c2:27:ee:e4:be:da:b5:64:8c:17:d8:
         f1:05:16:5f:15:93:97:10:6c:3e:02:2e:c5:10:42:c3:64:2e:
         d3:a8:26:0a:4d:b7:48:47:f4:99:5e:bb:55:66:cf:cd:46:d1:
         2f:2d:ee:55:99:ed:16:01:bc:b1:e9:10:fd:ec:0b:0c:c8:4a:
         80:35:fa:2e:22:12:9a:64:15:13:d8:ff:a1:09:73:e7:f9:13:
         59:0b:a8:c3:41:78:ae:65:ff:69:b4:9c:38:b2:75:b3:fd:cb:
         d2:24:85:40:1c:ed:ee:c2:74:c1:7f:09:bb:b0:0d:9f:4f:db:
         fc:1a:7d:4e:65:fe:c2:81:b3:31:86:07:d4:d2:3c:34:23:1d:
         ee:00:03:6d:0f:fe:89:94:b6:ce:8e:75:8f:f5:a5:7a:0b:54:
         d6:e3:33:58:7d:a5:4b:bf:49:84:e2:7c:bd:ec:62:7b:bf:d0:
         4c:99:6b:5e:a1:2d:eb:77:75:8e:a5:9d:1e:e8:64:bc:c8:8a:
         f8:b8:ff:e7:b6:8e:9a:51:35:7f:01:0e:f0:cd:de:54:7b:88:
         22:c2:5a:c6:d7:5c:53:61:8a:4d:0d:dd:a7:2f:2f:28:c8:c3:
         01:bb:81:cd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4xF1Tc4KBAcrPaMZUNc1z9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAzMjg3MzUxODY5N2MyM2U5YzNlMzdhNjQ2YmFkMTIxMjM1
YWQ3NDQwHhcNMjYwNTE2MTQwMTEzWhcNMjYwNTE3MTQwMTEzWjAzMTEwLwYDVQQD
EyhlNTgxOWIwM2RlZmIyN2UxZmUyNWY2MzQ0YjM0N2QxNGM5M2M4MjFmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyvxE+3YV0N96xHvFAxt+iKhHBED3
fpkvVFUIopcz7FcKECQN3jiLajBbXrBOCLyENOpU0/wCp1dkS34SVjvalv8v1jEu
pbu7tbMFqRuWrMWeXLvQtR2G+836A+5D/sPPjID3Kxh1sUBQT3lKAuGkqa0YvDHh
m1eYO1srTSaPzViMPYnu5GJ1hnZIQQdAo96l1rHkHfUIbNp2KrH2DEZnNOfL80uT
t+XY6SSMHFgkSoE/he1qBQpng+L1FZs69Y3xda+vgfEU1aVx7msmGv/SsavkLGka
/WCPe9iziPiYjmdiHaAQ24eeEPWOnNZaF6ev44d22RVxLkbbYLQhNAbGjwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOWBmwPe+yfh/iX2NEs0fRTJPIIfMB8GA1UdIwQY
MBaAFAMoc1GGl8I+nD43pka60SEjWtdEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQXloelVZYVh3ajZjUGplbVJyclJJU05hMTBRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZS9lYmQwNWUtZjYwNy00YmZiLWE0MmIt
MTI3MDA4OTI0ZWVkLzEvQXloelVZYVh3ajZjUGplbVJyclJJU05hMTBRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82ZS9lYmQwNWUtZjYwNy00YmZiLWE0MmItMTI3MDA4OTI0ZWVk
LzEvQXloelVZYVh3ajZjUGplbVJyclJJU05hMTBRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYT9qglO7
neSaWVPedQPYuIjn9ROPS3kqhsIn7uS+2rVkjBfY8QUWXxWTlxBsPgIuxRBCw2Qu
06gmCk23SEf0mV67VWbPzUbRLy3uVZntFgG8sekQ/ewLDMhKgDX6LiISmmQVE9j/
oQlz5/kTWQuow0F4rmX/abScOLJ1s/3L0iSFQBzt7sJ0wX8Ju7ANn0/b/Bp9TmX+
woGzMYYH1NI8NCMd7gADbQ/+iZS2zo51j/WlegtU1uMzWH2lS79JhOJ8vexie7/Q
TJlrXqEt63d1jqWdHuhkvMiK+Lj/57aOmlE1fwEO8M3eVHuIIsJaxtdcU2GKTQ3d
py8vKMjDAbuBzQ==
-----END CERTIFICATE-----
Generated at Sat May 16 19:31:49 2026 by rpki-client